{
"canonical_url": "infisical.com/platform/secrets-management.md",
"capabilities": [],
"category": null,
"classification": {
"matched": {
"cybersecurity": [
"secrets"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": null,
"compliance": [
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://infisical.com/",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "af0c11162930ee9d0252e96f72cd61a17ec588242bfc298dc7a5645e5ef9baff",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:52Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://infisical.com/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "af0c11162930ee9d0252e96f72cd61a17ec588242bfc298dc7a5645e5ef9baff",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:52Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": null,
"description": "Deliver application credentials at runtime instead of from files, and when AI agents should use Agent Vault instead.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"cybersecurity": {
"components": {
"adoption": null,
"docs": 9.0,
"domain_fit": 34.0,
"ecosystem": 4.6,
"governance": 3.0,
"health": null,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 0.65,
"governance_credited": {
"soc2": 0.15
},
"profile": "security",
"rank": null,
"score": 33.0,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": [
"adoption",
"health"
]
}
},
"external_ids": {
"ard": "urn:air:infisical.com:doc:platform/secrets-management"
},
"first_seen": "2026-10-26T12:23:06Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_a962287a0917a0f6",
"identity": {
"evidence": [
"standards_metadata_at_publisher_domain"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 28,
"incidents": 0,
"links": [
{
"date": "2025-07-15",
"kind": "cve",
"title": "CVE-2025-49827",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49827"
},
{
"date": "2025-07-15",
"kind": "cve",
"title": "CVE-2025-49828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49828"
},
{
"date": "2025-07-15",
"kind": "cve",
"title": "CVE-2025-49829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49829"
},
{
"date": "2025-07-15",
"kind": "cve",
"title": "CVE-2025-49830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-49830"
},
{
"date": "2025-10-17",
"kind": "cve",
"title": "CVE-2025-59043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59043"
},
{
"date": "2025-10-22",
"kind": "cve",
"title": "CVE-2025-62513",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62513"
},
{
"date": "2025-10-22",
"kind": "cve",
"title": "CVE-2025-62705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62705"
},
{
"date": "2025-11-25",
"kind": "cve",
"title": "CVE-2025-64761",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64761"
},
{
"date": "2026-01-21",
"kind": "cve",
"title": "CVE-2026-22822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22822"
},
{
"date": "2026-03-18",
"kind": "cve",
"title": "CVE-2026-32691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32691"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:23:06Z",
"license": null,
"name": "Secrets Management",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"status": "unknown"
},
"ard": {
"identifier": "urn:air:infisical.com:doc:platform/secrets-management",
"manifest_url": "https://infisical.com/.well-known/ard.json",
"media_type": "text/markdown",
"parser_version": "ard-0.91",
"status": "verified",
"trust_manifest": "absent"
},
"mcp": {
"status": "unknown"
}
},
"publisher_domain": "infisical.com",
"representative_queries": [
"how do I stop keeping secrets in .env files",
"how do I fetch secrets at runtime in my application or CI pipeline",
"how do I rotate a database credential automatically"
],
"resource_type": "agent",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:44:43Z",
"cves": 28,
"source": "nvd",
"tier": 1
},
"signals": {},
"slug": "infisical-com-secrets-management",
"sources": [
{
"payload_hash": "49199c9ae6907057a71fe767edbcc94f7c062357351d262f5b693049df0bf31c",
"retrieved_at": "2026-10-26T12:23:06Z",
"system": "ard",
"url": "https://infisical.com/.well-known/ard.json"
}
],
"tags": [
"documentation",
"products"
],
"tenant": null,
"traces": [
{
"agent_version": null,
"bundle": "bundles/tr_st_a962287a0917a0f6_abcb4824",
"checked_on": null,
"date": "2026-10-11",
"format": "bundle",
"harness_version": "probe-1.0",
"id": "tr_st_a962287a0917a0f6_abcb4824",
"kind": "self_test",
"notes": "Produced automatically on every refresh; a new bundle is written only when the observation changes",
"observed": {
"actions": [
"served Agentic Resource Discovery (ARD) document"
],
"approval": null,
"egress": false,
"entry": "GET on the publisher's well-known discovery paths",
"outcome": "ARD verified",
"refused": null,
"secrets_touched": false
},
"reviewer": null,
"scenario": "Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths",
"scope": "product",
"sha256": "sha256:a8663a44d9d77b6c0de97e66bb126059dab0fd2c7af952acd4973a1a20b2da76",
"source": "AgentDossier refresh",
"tier": 1,
"title": "Registry probe of Secrets Management's discovery endpoints",
"url": "https://sushegaad.github.io/AgentDossier/traces/tr_st_a962287a0917a0f6_abcb4824/",
"vendor_response": null
}
],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 3,
"protocols": 1,
"security": 1,
"traces": 1,
"vendor_compliance": 4
},
"url": "https://infisical.com/platform/secrets-management.md",
"vendor": "infisical.com"
}